KDC is running, but no kb’ized services working/no tickets?

[mguertin]

Hello everyone, first. great forum! I couldn’t have gotten this far without it, fantastic resources, but something I’ve run into I can’t seem to find an answer in here already.

We recently upgraded to panther server, things have been running (mostly) smooth and just preparing to move to OD authentication and services in the new year.

I have things configured ok, Server Admin shows my KDC is running but … after using a network login (with all the proper home dirs setup in ldap, etc), the I get an error that my home directory is not in it’s usual place (/Users or /Home).

I can manually mount the home share for this user (I have to put in password by hand) and it all seems to be there and intact, but it just seems like I’m not getting a KDC ticket for the other services (AFP in this case) and it’s not pre-mounting it as my network home. Terminal gives me: "no home directory /Network/Servers/Fileserver/Shared Items/HomeDirs/guertin" — so that’s telling me it knows where it’s supposed to be getting home from but it’s not getting the ticket (or whatever it’s called) required to mount without password/user intervention.

I’m pretty newbie to this stuff, but not afraid of CLI (have done some big time linux hacking/coding/management stuff with no problems). Are there any logfiles or something else that can give me enough of a clue to fix this?

[mguertin]

ok, I seem to have gotten things worked out for the home dirs (why it works now but didn’t before I’m not sure!), but I’m still not getting KDC tickets for any of the kb’ized services (AFP, etc).

Any suggestions as to where I can look to help figure out why? Or am I not understanding the Apple documents properly, from what i can glean there it should "just work" once kb logins are working . . .

Any ideas are appreciated!

[mguertin]

no one can offer advice on this?

All I am getting is a single klist -kt entry (the main tgt ticket), but nothing else seems to work after intial login with kerberos. All the services are running, my realm seems to be setup fine, dns is ok .. I’m stumped.

Can anyone at least point me to where I can find logs for this, or how I can turn on a verbose setting for the daemons to help debug?

[Author]

Posts